Re: [PATCH] net:tipc: Fix a double free in tipc_sk_mcast_rcv

2021-03-29 Thread patchwork-bot+netdevbpf
Hello: This patch was applied to netdev/net.git (refs/heads/master): On Sun, 28 Mar 2021 00:30:29 -0700 you wrote: > In the if(skb_peek(arrvq) == skb) branch, it calls __skb_dequeue(arrvq) to get > the skb by skb = skb_peek(arrvq). Then __skb_dequeue() unlinks the skb from > arrvq > and returns

[PATCH] net:tipc: Fix a double free in tipc_sk_mcast_rcv

2021-03-28 Thread Lv Yunlong
In the if(skb_peek(arrvq) == skb) branch, it calls __skb_dequeue(arrvq) to get the skb by skb = skb_peek(arrvq). Then __skb_dequeue() unlinks the skb from arrvq and returns the skb which equals to skb_peek(arrvq). After __skb_dequeue(arrvq) finished, the skb is freed by kfree_skb(__skb_dequeue(arr